Skip to content
OpenAdvisories

Package · RubyGems

httparty

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.8
    CVE-2025-68696

    httparty Has Potential SSRF Vulnerability That Leads to API Key Leakage

    httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. This issue has been patched via commit 0529bcd.

    jnunemaker httparty httparty ruby-httparty Debian Ubuntu RubyGems
  • High —
    CVE-2013-1801

    HTTParty does not restrict casts of string values

    The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) by leve…

    httparty RubyGems